$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: eo7ePvgxmB9Hjp12GCP+TyHEY3ie91+oT24b6FjPQDo= Subject key identifier: 84:BC:A9:D6:B6:3C:E2:9E:91:4F:67:40:22:D0:7A:71:62:F7:D1:18 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 52155372A0E620BB21C4D2E473067A8B999F8DFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01E9 Signing time: Tue 24 Mar 2026 19:01:36 +0000 Manifest this update: Tue 24 Mar 2026 18:56:36 +0000 Manifest next update: Sat 28 Mar 2026 05:16:36 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: o2m3pnN+dbbHG+I7zEyV1O4TCLzO8zZsOKSTBHS1h4Y=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: MoFvv+++vTB85GXC2Kbs1Zs2yMHHdxOOMsOAsgFAkGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:15:53:72:a0:e6:20:bb:21:c4:d2:e4:73:06:7a:8b:99:9f:8d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Mar 24 18:56:36 2026 GMT Not After : Mar 28 05:16:36 2026 GMT Subject: CN=84BCA9D6B63CE29E914F674022D07A7162F7D118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:e9:0c:08:36:bc:41:2c:66:3d:f0:4b:a9: 2a:80:a3:36:6e:56:df:11:79:3e:f2:55:93:ec:26: 54:26:4e:b5:0d:ad:26:a3:83:8e:40:05:9a:4f:47: 70:3c:ea:8a:91:e5:01:e5:99:6a:ba:1a:9b:4b:aa: 45:15:13:6a:9d:79:0d:af:b4:b5:a7:6e:9a:54:fc: 2b:b9:e0:32:1d:9d:0c:cb:be:1f:f7:96:ff:40:e5: c4:c1:e2:54:76:a2:1b:ff:c6:27:17:bf:52:7d:97: 7d:60:9e:95:5e:76:cc:7f:43:2b:d0:1b:18:c1:d1: e9:ca:bd:d3:af:a3:21:10:3f:52:af:62:86:f3:eb: 65:c4:e5:18:8d:26:88:78:ab:5c:f4:82:99:88:c8: fb:5b:0f:71:9f:40:f9:02:6c:25:a9:eb:12:3e:75: 91:96:1d:4a:85:26:42:d1:39:42:1a:5d:a4:24:75: 15:af:45:2b:57:62:41:4a:ee:7f:89:33:30:85:5c: d7:c3:a9:3c:a9:31:41:7f:4b:10:77:13:b7:c2:29: 97:30:40:04:33:21:e2:08:10:68:d1:2e:8d:70:d2: 6a:d1:9e:cf:8b:b2:c7:28:81:5e:66:ad:3a:cc:7e: 1e:51:8a:a6:0e:90:88:e8:a4:93:bb:66:6b:d7:64: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BC:A9:D6:B6:3C:E2:9E:91:4F:67:40:22:D0:7A:71:62:F7:D1:18 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9d:44:d6:c2:0b:41:95:92:88:b5:d4:13:c8:f7:1a:fc:04: 38:82:27:f4:8d:43:b9:14:d3:ff:6d:22:58:15:68:04:60:9e: 7c:26:3c:61:b6:54:d6:ae:2c:91:79:83:1b:15:74:dc:41:70: ee:35:0d:2d:0e:a6:b1:34:f1:ba:2d:f7:d3:9e:ee:e7:fd:bc: 9f:15:c2:ce:46:1f:a1:ae:14:3d:d1:4c:85:79:63:25:68:d6: bb:37:05:29:66:49:1b:44:57:e9:90:ae:8e:57:5c:29:b2:18: c2:35:08:52:49:3b:52:f5:f9:6a:e8:a8:fd:41:6b:a8:47:35: c5:18:e2:d3:6d:6c:d7:dc:fe:0e:13:cd:d4:35:2b:11:c3:1f: eb:4b:2c:be:75:3a:e3:01:21:23:49:89:93:4b:cd:8b:4d:f1: b3:2a:d5:e3:c3:d8:18:61:d6:24:58:ad:ff:9e:31:c9:96:30: 0e:e1:e8:28:45:85:a7:1e:40:b0:f6:09:9f:4b:02:53:3f:a3: 3a:c2:01:e6:68:00:bf:f1:92:5c:22:55:c2:e7:ca:7d:00:c9: fb:fa:83:8d:7c:29:f4:fc:14:29:5e:76:e1:7b:25:75:58:9f: d7:fd:ca:a0:62:ed:af:90:a2:06:36:fe:d6:51:42:34:c2:74: 73:e5:d0:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhVTcqDmILshxNLkcwZ6i5mfjf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNjAzMjQxODU2MzZaFw0yNjAzMjgwNTE2MzZaMDMxMTAvBgNV BAMTKDg0QkNBOUQ2QjYzQ0UyOUU5MTRGNjc0MDIyRDA3QTcxNjJGN0QxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2s+kMCDa8QSxmPfBLqSqAozZu Vt8ReT7yVZPsJlQmTrUNrSajg45ABZpPR3A86oqR5QHlmWq6GptLqkUVE2qdeQ2v tLWnbppU/Cu54DIdnQzLvh/3lv9A5cTB4lR2ohv/xicXv1J9l31gnpVedsx/QyvQ GxjB0enKvdOvoyEQP1KvYobz62XE5RiNJoh4q1z0gpmIyPtbD3GfQPkCbCWp6xI+ dZGWHUqFJkLROUIaXaQkdRWvRStXYkFK7n+JMzCFXNfDqTypMUF/SxB3E7fCKZcw QAQzIeIIEGjRLo1w0mrRns+LsscogV5mrTrMfh5RiqYOkIjopJO7ZmvXZI/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLyp1rY84p6RT2dAItB6cWL30RgwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEudRNbCC0GVkoi11BPI9xr8BDiCJ/SNQ7kU 0/9tIlgVaARgnnwmPGG2VNauLJF5gxsVdNxBcO41DS0OprE08bot99Oe7uf9vJ8V ws5GH6GuFD3RTIV5YyVo1rs3BSlmSRtEV+mQro5XXCmyGMI1CFJJO1L1+WroqP1B a6hHNcUY4tNtbNfc/g4TzdQ1KxHDH+tLLL51OuMBISNJiZNLzYtN8bMq1ePD2Bhh 1iRYrf+eMcmWMA7h6ChFhaceQLD2CZ9LAlM/ozrCAeZoAL/xklwiVcLnyn0Ayfv6 g418KfT8FCleduF7JXVYn9f9yqBi7a+QogY2/tZRQjTCdHPl0Co= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:56 2026 by rpki-client